go[.]voevux[.]com

The domain go.voevux.com is currently listed as active with an elevated risk rating. DNS resolution maps the host to the IP address 104.21.59.30, which is hosted on a Cloudflare network. VirusTotal analysis shows that 13 of 91 scanned security engines have emitted a detection for the domain, indicating a non‑trivial level of malicious confidence. The domain appears on a single public blocklist and is explicitly blocked by the PhishDestroy feed, confirming that at least one commercial phishing mitigation service has observed abusive activity associated with this host.

Open‑source threat intel sources such as the OTX repository do not yet contain a dedicated indicator entry for go.voevux.com, and no Safe Browsing verdicts have been published. Registrar details, certificate information, HTTP response codes, page title, and any observed landing‑page content have not been disclosed in the available intelligence, leaving the exact phishing campaign payload and targeted brand undetermined. Consequently, analysts cannot confirm whether the site is used for credential harvesting, account takeover, or other data‑exfiltration techniques beyond the generic classification of phishing. Defenders should proactively block network traffic to 104.21.59.30 and add go.voevux.com to local DNS deny lists.

Email filtering rules that flag URLs containing the subdomain “voevux.com” are recommended, as is the inclusion of the domain in URL reputation and web‑proxy blocklists. Continuous monitoring of VirusTotal and other multi‑engine aggregators for changes in detection counts is advised, as further scans may reveal additional malicious behaviors. Organizations using endpoint detection and response (EDR) solutions should generate alerts for any process that attempts to resolve or connect to the domain, and security operations teams should correlate such events with user‑reported phishing attempts.